Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Mombasa

Region: Mombasa

Country: Kenya

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.48.194.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5371
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;105.48.194.125.			IN	A

;; AUTHORITY SECTION:
.			368	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050101 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 01 19:20:11 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 125.194.48.105.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 125.194.48.105.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
118.24.242.239 attack
2019-11-21T07:52:54.919139homeassistant sshd[29005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.242.239  user=root
2019-11-21T07:52:56.661721homeassistant sshd[29005]: Failed password for root from 118.24.242.239 port 39822 ssh2
...
2019-11-21 15:55:46
92.59.136.115 attackbotsspam
Lines containing failures of 92.59.136.115
Nov 19 09:56:04 MAKserver06 sshd[14323]: Invalid user pi from 92.59.136.115 port 37710
Nov 19 09:56:04 MAKserver06 sshd[14324]: Invalid user pi from 92.59.136.115 port 37708
Nov 19 09:56:04 MAKserver06 sshd[14323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.59.136.115 
Nov 19 09:56:04 MAKserver06 sshd[14324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.59.136.115 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=92.59.136.115
2019-11-21 15:50:38
93.230.154.230 attackbotsspam
Nov 21 06:28:30 ws26vmsma01 sshd[8276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.230.154.230
...
2019-11-21 15:59:39
106.12.28.36 attackbots
Nov 21 07:23:50 MK-Soft-VM4 sshd[12842]: Failed password for root from 106.12.28.36 port 49370 ssh2
...
2019-11-21 16:11:53
14.253.150.143 attackbots
Nov 19 11:43:48 mxgate1 postfix/postscreen[659]: CONNECT from [14.253.150.143]:43384 to [176.31.12.44]:25
Nov 19 11:43:48 mxgate1 postfix/dnsblog[665]: addr 14.253.150.143 listed by domain cbl.abuseat.org as 127.0.0.2
Nov 19 11:43:48 mxgate1 postfix/dnsblog[668]: addr 14.253.150.143 listed by domain zen.spamhaus.org as 127.0.0.4
Nov 19 11:43:48 mxgate1 postfix/dnsblog[668]: addr 14.253.150.143 listed by domain zen.spamhaus.org as 127.0.0.11
Nov 19 11:43:49 mxgate1 postfix/dnsblog[667]: addr 14.253.150.143 listed by domain b.barracudacentral.org as 127.0.0.2
Nov 19 11:43:54 mxgate1 postfix/postscreen[659]: DNSBL rank 4 for [14.253.150.143]:43384
Nov x@x
Nov 19 11:43:55 mxgate1 postfix/postscreen[659]: HANGUP after 1.3 from [14.253.150.143]:43384 in tests after SMTP handshake
Nov 19 11:43:55 mxgate1 postfix/postscreen[659]: DISCONNECT [14.253.150.143]:43384


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.253.150.143
2019-11-21 16:14:31
27.50.24.83 attackbots
Nov 21 08:38:33 tuxlinux sshd[5154]: Invalid user manager from 27.50.24.83 port 9224
Nov 21 08:38:33 tuxlinux sshd[5154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.50.24.83 
Nov 21 08:38:33 tuxlinux sshd[5154]: Invalid user manager from 27.50.24.83 port 9224
Nov 21 08:38:33 tuxlinux sshd[5154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.50.24.83 
Nov 21 08:38:33 tuxlinux sshd[5154]: Invalid user manager from 27.50.24.83 port 9224
Nov 21 08:38:33 tuxlinux sshd[5154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.50.24.83 
Nov 21 08:38:35 tuxlinux sshd[5154]: Failed password for invalid user manager from 27.50.24.83 port 9224 ssh2
...
2019-11-21 15:58:06
41.60.238.93 attackspam
TCP Port Scanning
2019-11-21 15:53:01
167.114.145.139 attack
IP blocked
2019-11-21 16:03:19
93.174.93.5 attack
Nov 21 07:20:55 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.5, lip=207.180.241.50, session=
Nov 21 07:21:23 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.5, lip=207.180.241.50, session=
Nov 21 07:24:53 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.5, lip=207.180.241.50, session=<3pTaWtWXmuJdrl0F>
Nov 21 07:25:22 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.5, lip=207.180.241.50, session=
Nov 21 07:28:09 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.5, lip=207.180.241.50, session
...
2019-11-21 16:14:05
200.60.91.42 attackspambots
Nov 21 07:28:38 * sshd[21445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.60.91.42
Nov 21 07:28:40 * sshd[21445]: Failed password for invalid user swinton from 200.60.91.42 port 63786 ssh2
2019-11-21 15:54:18
5.178.87.219 attack
Nov 20 21:50:17 hpm sshd\[29541\]: Invalid user smoya from 5.178.87.219
Nov 20 21:50:17 hpm sshd\[29541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.178.87.219
Nov 20 21:50:18 hpm sshd\[29541\]: Failed password for invalid user smoya from 5.178.87.219 port 42156 ssh2
Nov 20 21:53:55 hpm sshd\[29809\]: Invalid user dbus from 5.178.87.219
Nov 20 21:53:55 hpm sshd\[29809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.178.87.219
2019-11-21 16:01:01
167.71.223.191 attack
Nov 21 09:01:34 sd-53420 sshd\[28951\]: User www-data from 167.71.223.191 not allowed because none of user's groups are listed in AllowGroups
Nov 21 09:01:34 sd-53420 sshd\[28951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.223.191  user=www-data
Nov 21 09:01:37 sd-53420 sshd\[28951\]: Failed password for invalid user www-data from 167.71.223.191 port 37578 ssh2
Nov 21 09:05:40 sd-53420 sshd\[30298\]: User root from 167.71.223.191 not allowed because none of user's groups are listed in AllowGroups
Nov 21 09:05:40 sd-53420 sshd\[30298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.223.191  user=root
...
2019-11-21 16:09:55
140.143.242.159 attack
2019-11-21T08:30:53.553088  sshd[14444]: Invalid user kcep from 140.143.242.159 port 40920
2019-11-21T08:30:53.568607  sshd[14444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.242.159
2019-11-21T08:30:53.553088  sshd[14444]: Invalid user kcep from 140.143.242.159 port 40920
2019-11-21T08:30:55.295076  sshd[14444]: Failed password for invalid user kcep from 140.143.242.159 port 40920 ssh2
2019-11-21T08:35:20.893327  sshd[14509]: Invalid user krysko from 140.143.242.159 port 44322
...
2019-11-21 16:11:23
106.13.148.44 attackspambots
Nov 21 07:54:30 localhost sshd\[21620\]: Invalid user cream from 106.13.148.44 port 41652
Nov 21 07:54:30 localhost sshd\[21620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
Nov 21 07:54:31 localhost sshd\[21620\]: Failed password for invalid user cream from 106.13.148.44 port 41652 ssh2
Nov 21 07:58:55 localhost sshd\[21711\]: Invalid user test1test from 106.13.148.44 port 47534
Nov 21 07:58:55 localhost sshd\[21711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
...
2019-11-21 16:08:38
183.87.157.202 attack
Nov 20 21:33:47 php1 sshd\[31066\]: Invalid user lowander from 183.87.157.202
Nov 20 21:33:47 php1 sshd\[31066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.87.157.202
Nov 20 21:33:49 php1 sshd\[31066\]: Failed password for invalid user lowander from 183.87.157.202 port 55600 ssh2
Nov 20 21:38:14 php1 sshd\[31436\]: Invalid user hieldbrant from 183.87.157.202
Nov 20 21:38:14 php1 sshd\[31436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.87.157.202
2019-11-21 15:46:53

Recently Reported IPs

184.214.104.215 50.57.155.19 131.171.164.24 54.85.184.172
145.209.45.71 179.22.134.28 198.146.114.191 150.142.3.160
151.202.151.53 180.38.243.1 203.16.106.156 210.131.88.123
45.52.165.157 133.235.229.24 171.95.27.254 181.88.155.217
184.77.128.72 71.117.80.122 161.86.233.163 173.23.44.69